Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: AxPyGjP+3WWSEHV1fp1DWW39wLkexpSssn+Lz1//MjY=
Subject key identifier: 65:FB:27:D8:50:83:54:7F:7D:CF:04:3D:D7:C3:2C:6F:30:F4:0B:A3
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019A522C94716DA02C1386DDFB25B532BD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0BC8
Signing time: Wed 05 Nov 2025 04:00:44 +0000
Manifest this update: Wed 05 Nov 2025 04:00:44 +0000
Manifest next update: Thu 06 Nov 2025 04:00:44 +0000
Files and hashes: 1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: JOOjfaLFXC6nMI93HqFj/cUBFnAWRhokeOokbaek6Lw=)
3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:94:71:6d:a0:2c:13:86:dd:fb:25:b5:32:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Nov 5 04:00:44 2025 GMT
Not After : Nov 6 04:00:44 2025 GMT
Subject: CN=65fb27d85083547f7dcf043dd7c32c6f30f40ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:61:b1:50:2c:58:a9:33:99:ac:df:9e:9c:
0a:79:84:fd:17:5e:61:bc:c9:a7:fd:c0:b1:fd:16:
5e:a7:8f:75:07:76:81:35:e9:79:74:80:73:89:84:
55:3e:c5:84:a6:68:36:ee:95:94:19:ae:bc:dd:a6:
db:8a:a7:c5:7c:29:90:5a:2a:d2:60:80:60:b2:09:
8b:fc:bf:43:78:9e:aa:b3:f7:72:4b:89:db:52:f4:
c6:e5:0d:21:c2:78:3e:18:85:20:77:e3:50:1c:d4:
fb:24:52:1a:e5:79:96:02:eb:f2:a2:d4:14:ed:39:
17:19:11:bd:e1:2c:e5:1d:66:77:29:c9:8f:27:a6:
f9:5d:ab:46:a3:d8:f5:1f:94:08:a6:5c:83:80:63:
79:df:ac:0b:4d:d5:da:cd:0c:94:a1:3e:0d:39:38:
68:97:71:e9:8a:66:75:bb:2d:7d:b0:e1:0a:02:91:
59:ba:7a:c1:0d:cd:fe:e4:0f:19:58:32:9a:e7:7d:
90:65:26:2c:99:df:0e:ec:12:64:b2:14:dd:a9:a6:
e3:19:71:94:6a:2a:53:50:5d:91:44:8f:f4:2a:81:
b5:47:52:8a:5d:8a:65:c0:c7:66:e4:64:ea:c2:4c:
b9:c4:63:79:4a:60:bf:72:3b:f5:c5:9b:89:11:b4:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:27:D8:50:83:54:7F:7D:CF:04:3D:D7:C3:2C:6F:30:F4:0B:A3
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:a8:32:0a:0f:8d:16:df:9f:80:4f:d7:4e:d5:52:99:79:
47:8b:5d:28:b3:db:8e:87:00:e8:e3:5d:3a:e2:6c:8e:1f:bc:
ce:d8:71:8b:fb:3a:0f:ba:de:43:44:c8:d3:35:29:18:ce:77:
77:74:1f:b4:df:4e:42:62:3d:50:b0:10:2a:50:b3:49:b4:1a:
00:b5:ae:59:6d:f5:fd:d9:95:da:f0:60:a5:40:4b:76:48:b4:
b6:b7:ea:0f:2f:4e:f5:51:d8:37:9f:36:ec:8b:d6:bd:3c:c7:
a9:4e:08:b6:1c:54:77:20:ce:67:78:b9:d0:1d:06:fb:b1:19:
82:e9:b0:2a:08:78:e0:81:5d:f4:76:49:86:08:a1:9e:ff:21:
63:54:7a:a9:58:0f:a7:f3:50:d0:16:d1:f9:aa:a2:db:13:c0:
a0:2e:e1:15:09:82:16:72:20:14:02:41:76:26:f8:bb:b7:d9:
a4:22:2a:40:5a:33:1d:69:b9:5c:13:61:56:99:ef:1d:6e:2e:
bf:50:41:6e:c2:41:62:28:f0:59:57:0e:04:34:2e:08:4e:90:
b0:34:12:d4:a0:59:c0:6e:16:9a:4a:c6:75:a6:3c:ac:6a:14:
9b:e6:fd:ad:df:b1:24:70:68:16:67:8e:f8:0b:2c:39:fb:5d:
51:e2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:27 2025 by rpki-client